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Abstract Perfect nonlinear functions from a finite group G to another one H are 
those functions f : G H such that for all nonzero a € G, the derivative daf : x i-^ 
f{ax)f{x)~^ is balanced. In the case where both G and H are Abelian groups, / : 
G H is perfect nonlinear if and only if / is bent i. e. for all nonprincipal character 
X of H, the (discrete) Fourier transform of x o / has a constant magnitude equals 
to |G|. In this paper, using the theory of linear representations, we exhibit similar 
bentness-like characterizations in the cases where G and/or H are (finite) non 
Abelian groups. Thus we extend the concept of bent functions to the framework 
of non Abelian groups. 
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1 Introduction 

Let G and H be two finite groups (in multiplicative representation). Perfect non- 
linear functions from G to H are those ideal functions f : G H that match 
the less possible with the pattern of group homomorphism i.e. such that for all 
nonzero a e G and for all /3 G //, 

|{x e Gl/(ax)/(:r)-i = = M. (1) 

When G and H are both (finite-dimensional) vector spaces over Z2 = {0, 1}, 
these functions, originally introduced by Nyberg |5j, exhibit the maximal resis- 
tance against the differential attack [T]. Also in the Boolean case, this notion is 



LIPN-UMR CNRS 7030, Institut GaUlee, Universite Paris-Nord 99, avenue Jean-Baptiste 
Clement 93430 Villetaneuse, France, 
E-mail; laurent.poinsot@Iipn.univ-parisl3.fr 



2 



Laurent Poinsot 



known to be equivalent to bent functions: / : Z™ Z2 is bent if for all a G Z2 
and for all nonzero /3 in Z2 , 



is the Fourier transform of </> : G — >■ C (this time a.x is the dot-product in Z™). 
These functions, independently introduced by Dillon [3j and Rothaus [9 , exhibit 
the maximal resistance against the linear attack ^ . 

The equivalence between bentness and perfect nonlinearity has been recently ex- 
tended by Carlet and Ding [51 and Pott [S] to the general case: f : G ^ H (where 
G and H are two finite Abelian groups) is perfect nonlinear if and only if for all 
a G G and for all nonprincipal character x oi H , 



where for : G C, is its discrete Fourier transform. 

In this paper, we exhibit the same kind of characterizations in the case where at 
least one of the two finite groups G and H is non Abelian. This gives a general 
equivalence between perfect nonlinearity and bentess. 

Outline of the paper 

Next section contains the general notations used in the paper. In sect.[3]are recalled 
some of the main results on the duality of finite groups. In particular, we present 
several kind of Fourier transforms used in the new characterizations of perfect 
nonlinearity in the non Abelian cases. The notion of perfect nonlinearity is exposed 
in the general framework of finite groups in sect.Hl Also in this section is given the 
dual characterization - i.e. the notion of bentness - of Carlet, Ding [2 and Pott 
[8] of perfect nonlinear functions in the Abelian groups setting. Finally our own 
results of non Abelian bentness are developed in sect. \5\ 

2 Notations 

15*1 is the cardinality of any finite set S and if S is nonempty (possibly infinite), 
Idg denotes its identity map. 

In this paper, the capital letters "G" and "H" always denote finite groups in mul- 
tiplicative representation, eg is the neutral element and G* is defined as G\ {ec}. 
The vector spaces considered are always finite-dimensional complex vector spaces. 
For a (complex) vector space V, Oy is its zero, dmi£{V) is its dimension and GL{V) 
denotes the linear group of V which is a subset of the vector space of all endomor- 
phisms of V, denoted End{V). If A is any linear map. A* denotes its adjoint and 





(3) 



xezij 



(X°/)(«)|' = |G| 



(4) 
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the unitary group of V is LI(V^). 

By convention, for each known result recalled in this paper, the proof has been 
intentionally omitted and a reference - not necessarily the original reference - is 
given. On the contrary, our own results are given obviously with their proofs and 
without any reference. 

3 On the duality of finite groups 

3.1 Introduction 

This paper is dedicated to the establishment of a dual characterization of the 
concept of perfect nonlinearity - similar to the one given by Carlet and Ding [2] 
and Pott [8] concerning Abelian groups - in the non Abelian groups setting, using 
some harmonic analysis techniques. So in this section, we recall some basics about 
the duality of finite groups and the Fourier transform. Most of the definitions and 
results given in this section are well-known and can be found in any book on finite 
groups ([6] for instance). 

3.2 The Abelian case 

3.2.1 The theory of characters 

Definition 1 Let G be a finite group. A character x of G is a group homomorphism 
from G to the multiplicative group C*. We denote by G the set of all characters, 
called dual of G. 

The set G is actually a group under the point-wise multiplication of characters 
and its elements are valued in the group of the |G|*'' complex roots of the unity. 
In particular. 



where \z\ is the complex-modulus and z is the conjugate of z G C. 

Proposition 1 (f^) Let G be a finite Abelian group. Then G and G are isomorphic. 

In the remainder of this paper, when a finite Abelian group G is considered, we 
always implicitly suppose that an isomorphism from G to G* has been fixed and we 
use xg denote the image of a by such an isomorphism. In particular, Va; G G, 
x'q (x) = 1 (this character is called trivial or principal) . Finally the characters 
satisfy the well-known orthogonality properties. 

Lemma 1 (^61) Let G be a finite Abelian group. For all a G we have 



Vx G G, Va; e G, \x{x)\ = 1 and xi^'^) = x{x) 



(5) 





For all X £ G, we have 




(7) 
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3.2.2 The (discrete) Founer transform 

Definition 2 Let G be a finite Abelian group. The Fourier transform oi (p : G ^ C 
is the map : G — >■ C defined for q G G by 

?{a) = J2 '^WxS(^). (8) 

Some well-known and useful results are summarized below for G a finite Abelian 
group. 

Proposition 2 (JUl) Let (j) : G ^ C. 

1. We have the inversion formula 

2. We have the Parseval's equation 

E w^)i' = ^E (10) 

3. (^(x) = Vx G G* i/ and only if (j) is constant; 

4. (pict) = Vq G G* i/ anci only if (j> is constant. 

Concerning the last two points, their proofs can be checked in [2]. 



3.2.3 The multidimensional (discrete) Fourier transform 

In subsection B. of sect. [5l we consider some V-vaXued functions, where 1/ is a 
finite-dimensional vector space, defined on a finite Abelian group G and we need 
to compute their "Fourier transforms" . That is the reason why we now introduce a 
natural extension of the discrete Fourier transform, called multidimensional Fourier 
transform, to deal with V^-valued functions rather than C-valued ones. More details 
on this transform should be found in 

Definition 3 Let G be a finite Abelian group, V a finite-dimensional vector space 
over C and : G — >■ C. The multidimensional Fourier transform of is defined as 

: G ^ 1/ 

Now let suppose that V is equipped with an inner-product (linear in the first 
variable and anti-linear in the second) denoted (., Let fix B an orthonormal 
basis of V . For each e G B, we define the component function <^e of : G — !■ V in 
direction e as the map 

06 : G ^ C 

X H-s> {(f){x),e)v. 
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According to the properties of orthonormal basis, we have Va; £ G, 

cj>{x) = J2 Mx>- (13) 

We can easily check that the muhidimensional Fourier transform is actually a 
component-wise discrete Fourier transform given by the following equation (for 
a e G) 

^^^(a) = ^0;(a)e. (14) 

eG-B 

Using this last equation, we can establish an inversion formula for the multidimen- 
sional Fourier transform. Let x £ X. 

(I>{x) = ^ cl>e(x)e 

eeB 

eS-E \ ' ' aGG / 

(by the inversion formula applied on 4>e) (15) 

' ' aGG VeG-B / 

= ^E^?''''H- 

aGG 

Finally this transform satisfies a result similar to the third point of proposition [2l 



Proposition 3 Let G he a finite Abelian group, V a finite-dimensional vector space 
over C and (f) : G ^ V . We have 4'{x) = Oy for all x £ G* if and only if (f>^^{a) = 
4>{eQ) for all a £ G. 

Proofs) Let suppose that for all x £ G* , 4>{x) = Oy. Then we have Va £ G, 

0^^(a) = 5^xS(^)<^(^) = 0(eG). 

xeG 

<^) Let suppose that (t>^^{a) = 4>{eQ) for all a £ G. Using the inversion formula 
m, we get that for x £ G, 0(x) = ^ ( E ^) "^(^g) = | °[^^) % ^ ! 
according to the orthogonality relations (lemma [ij. 



3.3 The non Abelian case 

3.3.1 The theory of linear representations 

Definition 4 Let F be a finite-dimensional complex vector space. A linear repre- 
sentation of a finite group G on U is a group homomorphism from G to GLiV). 
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For each linear representation p : G ^ GL{V), it is possible to find a basis of V in 
which for all x € G, p(x) is a unitary operator oi V i.e. p : G ^ 'U(V). Indeed, we 
can check that for a linear representation p of G on V, for each x G G, p{x) leaves 
invariant the following inner-product in V 

{u,v)g,p,V= ^{p{x){u),p{x){v))v (16) 
x<aG 

where {u,v) € and denotes any inner-product of V (linear in the first 

variable and anti-linear in the second). Then in the remainder, without loss of 
generality, we only consider unitary representations. 

The linear representations of G on C can be identified with the characters of 
G since C and GL{C) are isomorphic. Actually if G is a finite Abelian group then 
the notion of linear representation gives nothing new because it is equivalent to 
the notion of character. 

Definition 5 A linear representation p of a finite group G on V is said to be 
irreducible if there is no subspace W C V, other than {Oy} and V, such that 
Va; G G, Vu- G W, p{x){w) G W. 

Definition 6 Two linear representations p and p' of a finite group G on respec- 
tively V and V' are isomorphic if it exists a linear isomorphism $ : V ^ V' such 
that for all a; G G, 

<P o p{x) = p{x) o<P. (17) 

(A linear map that satisfies equality p7p is called equivariant map and is easily 
seen to be a morphism from V to V' seen as left G-modules.) 

The notion of isomorphism is an equivalence relation for linear representation^. 

Definition 7 For a finite group G, the dual of G, denoted G, is a set that contains 
exactly one and only one representative of each equivalence class of isomorphic 
irreducible representations of G. 

By definition, if (p,p') G G^, then p and p' are nonisomorphic irreducible repre- 
sentations of G. In the remainder, the notation 

p = pv (18) 

means that p : G 'U(l^) is an irreducible representation of G. 
If G is a finite Abelian group, then G is equal to G (up to an isomorphism from 
GL{C) to C). If G is a finite non Abelian group, the two notions of duality become 
distinct (in particular, G is not a group). By abuse of notation, G* is defined as 
the set G \ {po} where po is the trivial or principal representation of G i.e. \/x G G, 
po{x) = Idc. 

When dealing with linear representations, a major result, know as Schur's 
lemma, should be kept in mind. 

^ Even if the collection of all linear representations of a given finite group does not form a 
set but rather a proper class, it is an easy exercice to check that the collection of isomorphism 
classes of linear representations really does form a set. 
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Lemma 2 ([SJ) Let G be a fimte group. Let p = py £ G and X G End{V). IfVx G G, 
A o p(^x) = p{x) o A then X is a multiple of the identtty i.e. tt exists fc G C such that 
X = kidy . 

As direct consequences of the Schur's lemma, we can state the two following results 
that will be use in the sequel. 

Lemma 3 (^61) Let G be a finite group. For x G G* , 

J2 diinc{V)tr{py{x)) = (19) 

PvSG 

where "tr " denotes the usual trace of endomorphisms. 
Lemma 4 Let G be a finite group. Let p = py G G* . Then 

Y,p{x) = QEnd{vy (20) 

xeG 

Proof Let A G End{V) defined as A = p{x). Let xq G G. We have 

xeG 

A = ^ p{x) = p{xox) = p{xo) o p{x) = p{xo) o A 
xeG xeG xeG 



but also 



A = ^ p{x) = Y Pi^^o) = I I ° ^'^^0^ = ^ ° ''(^o)- 

xeG xeG \xeG / 

In particular A o p{xo) = p{xo) o A. As it is true for any xq £ G, X commutes with 
all p{x). By the Schur's lemma, A is a multiple on the identity: it exists fc G C such 
that A = kIdy. Now let suppose A 7^ OEnd(V)) then fc G C*. Using the first part of 
the proof, we know that A = p{x) o A (for each x G G). Then [Idy — p{x)) o X = 
OEnd{V)- As A = kIdy, we have {Idy — p{x)) o (kIdy) = QEnd(V) - Since 0, we 
have Idy — p{x) = OEnd{V) or also p{x) = Idy which is a contradiction with the 
assumption that p is non trivial. □ 



3.3.2 The representation-based Fourier transform 

By substituting irreducible linear representations to characters, it is possible to 
define a kind of Fourier transform for non Abelian groups. 
Let G be any finite group. 

Definition 8 Let <^ : G — )■ C. The (representation-based) Fourier transform of (p is 
defined for p = py G G as 

0(p) = Y '^(^)P(^) 6 End{V). (21) 
xeG 

This notion is a generalization of the classical discrete Fourier transform. This 
transform is invertible so we have also an inversion formula. 
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Proposition 4 (l^) Let (p : G ^ C. Then for all x £ G we have, 

'^(^) = M ^ dimc(V)tr(py(a.-i) o ^{py)). (22) 

A last technical lemma is given below. 
Lemma 5 Let : G — > C. We have 

1. (^(x) = Vx G G* if and only if^ip = pv & G, (fi{p) = (l){eQ)Idy; 

2. <t>{p) = OEnd(V) = Pv G G* if and only if (f> is constant. 

Proof 1. For p = py G G, we have 

4>{p) = (j>{x)p{x) (by definition) 

= (piec) p{^g) (by assumption on (jj) 
(since p is a group homomorphism). 
<^) For X £ G, the inversion formula gives 

0(a:) = 1^ ^ dimc(V)ir(py(a;"^) o^(py)) 
" IGT X! 'i^^c(V)tr{pv{x~^) o(t){ec)Idv) 



PveG 
(by hypothesis) 

= ^ E dimc(V)ir(pv(x-i)) 
PveG 

= E dimc(l/)tr(pv(a;)-i) 

PveG 

(since py is a group homomorphism) 
_ 0(eG) 



^ dime (V)tr(py (a;)*) 



|G| 

PveG 

(since py(x) is unitary) 
0(eG) 



|G| 

^ PveG 



^ dimc(V)fr(pv(a;)) 



^ diinc{V)tr{pv{x)) 



\G\ 

PveG 

if X ^ (according to lemma |3]). 



2. =>) By the inversion formula, Va; G G, 



(2:) = E dimc(V)ir(py(a; ^)o<?!)(py)) 

PveG (23) 
= Pi tr(0(Hc)) (by hypothesis). 
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Let pv G G, we have 4>{pv) = k Pv{^) (with ^(x) = k\/x £ G). Accord- 
ing to lemmalU we deduce that ^(py) = QEnd(y) for all py £ G* . 

n 



4 On perfect nonlinear functions 

4.1 Some basic definitions 

Perfect nonlinearity must be seen as the fundamental notion on which our results 
are based. Actually our ambition in this paper is to describe this combinatorial 
concept in terms of Fourier transforms. Thus it is necessary to briefiy present this 
topic. 

Definition 9 Let X and Y be two finite nonempty sets. A function / : X — !> F is 
said to be balanced if the function 



<t)f -.Y 

y ^ \{xeX\f{x)=y}\ 



(24) 



IXl 

is constant equal to -^^7 



Definition 10 Let G and H be two finite groups and f : G ^ H. The left derivative 
of / in direction q G G is defined as the map 



X ^ f(ax)f(x)~'^. 
Symmetrically, the right derivative of / in direction a G G is the map 



(25) 



The left-translation actions of both G and H are each equivalent to right-translation 
actions of G and H. Then it is easy to see that each result concerning right- 
translation action is symmetric to a result on left-translation action. So in this 
paper, we only focus on the left version and in the remainder we forgot the noun 
left: the derivative of / in direction a G G, will be simply denoted by daf and will 
be the same as d^^f. 

Definition 11 Let G and H be two finite groups and f : G ^ H. The map / 
is said to be perfect nonlinear if for each a G G*, daf is balanced i.e. for each 
(a,/3) €G* xH, 

|{x G G|/(aa;)/(:r)-i = = M. (27) 

When G and H are Z™ and Z2 , perfect nonlinearity is a very relevant cryptographic 
property because it ensures the maximal resistance against the so-called differential 
cryptanalysis of Biham and Shamir [1]. When |G| = \H\, these functions are also 
known as planar functions in finite geometry. 
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4.2 Bent functions in finite Abefian groups 

When considering the case of finite Abehan groups, it is possible to characterize 
the notion of perfect nonhnearity using the (discrete) Fourier transform; this dual 
characterization leading to an equivalent notion of bent functions. This work has 
been done recently and independently by Carlet and Ding [2] and Pott This 
subsection is then devoted to the presentation of these results. 

For the remainder of this subsection, we suppose given a pair (G, H) of finite 
Abelian groups. The main result obtained by the three authors is essentially based 
on the following lemma. 

Lemma 6 (I2j) Let X be a finite nonempty set and f : X ^ H . The map f is balanced 
if and only if, for each /3 G H* , we have 



In particular, if X is a (finite Abelian) group G, the previous lemma can be 
re- written as follows: / : G — > iif is balanced if and only if for each P e H*, 

{Xh ° f){^G) = 0. This technical result gives a link between balancedness and the 
Fourier transform which is used to prove the main result given below. 

Theorem 1 (\^) Let f : G ^ H . The map f is perfect nonlinear if and only if for 
each P £ H* , we have Vq G G, 



When G and H are Z™ and Z2 , a function / : Z™ Z2 that satisfies the equalities 
(|29p is called a boolean bent function. As perfect nonlinearity, this notion is very 
important in cryptography because it characterizes the boolean functions that ex- 
hibit the best resistance against the linear cryptanalysis of Matsui [2] . By analogy 
with the boolean case, we will say that a function / : G — > -ff that satisfies (|29p 
is an (Abelian) bent function. The theorem above means that Abelian bentness is 
strictly equivalent to perfect nonlinearity. In the remainder of this paper, we es- 
tablish the same kind of dual characterization in the cases where G and/or H can 
be non Abelian. 



5 Bent functions in finite non Abelian groups 

5.1 Case where G is non Abelian and H is Abelian 

In this subsection, G is a finite non Abelian group and ii" is a finite Abelian group. 
We first generalize lemma [6] in this context where a non Abelian group occurs. 

Lemma 7 Let f : G ^ H and pa £ G the principal irreducible representation of G. 
The map f is balanced if and only if for each /3 G H* , 




(28) 




(29) 



(30) 
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Proof First let compute the representation-based Fourier transform of the function 
Xh ° f ■ G ^ C at po. 



(31) 



E '^/(7)X^(7)«C 

■yen 

where we recall that 4>f{'~i) is defined as \{x £ G\f{x) = 7}|. 

\G\ 

Let 13 G H* and suppose that / is balanced. Then V7 G H, (fijij) = jj^l 



(by definition of balancedness) . According to pip , we find (x^j o f){po) 
\G 



— E X^r(7)^'^C- Since for each /3 G H* , we have ^ Xni'y) ~ ^ lemma 



[U, we have (x^ °/)(po) = QEnd{C)- 

-) Let suppose that for each p G H* , {xh ° /)(Po) ~ ^EjidiC)- According to pip , 
we have for each /? G H* , (f>f{[^)Id£ = OEnd(C) then for each /3 G H* , 
4>f{P) = 0. The fourth point of proposition [2] implies then that </)y is constant. 
Then using the inversion formula, we obtain that for all /? G H, 4>fil^) = 

TJfl'I'f^^H) = Tjf\Y ^fi'y) = Tjfi (by definition of 0/). Then / is balanced. 

II II -yeH ' ' 

n 



As in the Abelian case, the previous lemma is fundamental for the dual characteri- 
zation of perfect nonlinearity. Nevertheless before using it, we need an intermediary 
result. 

Proposition 5 Let f : G ^ H and j3 £ H . We define the autocorrelation function of 
f by 



ACf^p : G ^ C 

« ^ ((x^°da/)(po))(l). 



Then for all p = py G G, 



ACf^p{p) = ((x^ o /)(p)) o ((x^ o /)(p))*. (32) 
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Proof Let p = pv € G. 

AC^0{p)=J2 ACf^0ia)p{a) 

= Yl °rfa/(a^)po(a;)(l)p(a) 
aeGxeG 

= E E X^(/(a^)/ 
(by definition of po) 

= E E X^(/(a^))x^(/(^))p(«) 
aeGx£G 

aGG xGG 

(p is a morphism) 

aeGxeG 

= J2J2xH(n'^^))xUfi^))p{'^^)op{^r 

aeGxeG 
{p is unitary) 

= E ( E x^(/(«^))K«^) ) ° (x^(/(x))p(x)*) 

xeG \aeG / 
(by linearity) 

= E ° (x^(/W)pW*) 

xGG 

= ((X^ o /)(p)) o (Ex^(/WH^)*) 

= (xW)(p))°((xW)(p))*- 

n 

The dual characterization of perfect nonlinearity in this context is given below. 
This result generalizes the one of Car let, Ding and Pott. 

Theorem 2 Let f : G ^ H . The map f is perfect nonlinear if and only if^p = Pv £ 
G and V/3 £ H* , we have 

Hx'h ° ° ((X^ ° /)(P))* = \G\Idv (33) 

Proof The map / is perfect nonlinear 

<4> Va G G*, da f is balanced (by definition) 

<^ Vq G G*, G H*, [xh ° d'af){po) = QEndiO (according to lemmaCT]) 

^V^GC, VqGG*, 'ip&H*, ((x^°da/)(po))(^) =0 

^ Vz G C, Vq G G*, G H*, zACf^pia) = (by definition of ACf^p) 
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<^ Vq G G*, -ip e H*, ACf^p{a) = 

^\jp = py £G, V/? e H* , AC f^pip) = AC f^i3{eG)Uv (according to the first point 
of lemma [5]) . 

We have _ 

xeG (34) 

= E x>h) 

= \G\. 

Then / is perfect nonhnear V/3 e H* , \/p = py e G, AC/_^(p) = |G|/rfy 

^ V/3 G H*, Vp G G, ((x^ ° /)(p)) o ((x^ o f){p))* = \G\Idv (according to propo- 
sition [5]). □ 



The functions that satisfy formula p3p are the bent functions in this particular 
context where G is a finite non Abelian group and H is & finite Abelian group. 
We can note that this version of bentness is very similar to the one given in 
theorem [1] the discrete Fourier transform is replaced by its representation-based 
version, the complex-conjugate is replaced by the adjoint of endomorphisms, the 
multiplication of complex numbers by the composition of operators and the factor 
Idy is added. The discrete Fourier transform of Carlet, Ding and Pott's bent 
functions is, up to a factor |G|, (U(C)-valued. Regarding this last notion of bentness, 
the representation-based Fourier transform, also up to the factor |G|, is now V{V)- 
valued. It is possible to deduce from this theorem a result really similar to the 
traditional notion of bentness. 

Corollary 1 Let f : G ~> H . If the map f is perfect nonlinear then we have Vp = 
pv G G and V/3 G H* , 

II ix^H ° fEnd(V)= \G\ dimc(F), (35) 

where \\ X |l|„d(y)= tr{\o\*) forXe End{V). 



Proof The result is obvious by using on each member of (|33p the trace tr of endo- 
morphisms ofV. □ 

An interesting question, kept open in this paper, is to know if, whether or not, the 
reciprocal assertion of the previous corollary is true. 



5.2 Case where G is Abelian and H is non Abelian 

In this subsection, G is a finite Abelian group and _ff is a finite non Abelian 
group. Another time a technical result similar to both lemmas |6] and [7] is needed 
to establish a dual characterization of perfect nonlinearity in this context. 

Lemma 8 Let X be a finite nonempty set and f : X H . Then f is balanced if and 
only if for each p = py G H* , we have 

'^{p° .f){x) = OEnd{V)- (36) 
xex 



14 



Laurent Poinsot 



Proof Let p = pv € H . We have 

= E <^/(7)p(7) (37) 
= </'/(p)- 

=>) Let suppose that / is balanced and let p G H* , then we have 



E(^°/)(^-) = ^E^w = o^"'i(^) 



(according to lemma d]). 

Let suppose that for all p = py £ H* , (p ° .f){^) = OEnd{V)- Then the 

xex 

representation-based Fourier transform of<^y : H U C C is 



py^^ (38) 
\X\ it pv = po- 



According to lemma [5] we know that (jij is constant and more precisely (ac- 
cording to the proof of the lemma), V/3 G H, 4>f{P) = tt;t*''(</'/(^i^c))- But 

l-'^l 

4)f{Idc) = E ^fi'y)^d,C = \X\Idc (by definition of <^y). Then V/3 G H, (I>f{l3) = 
-yeH 

-r-r-rr and / is balanced. 
\H\ 



As in the previous case, we introduce a kind of autocorrelation function and we 
compute its discrete Fourier transform. 

Proposition 6 Let f : G ^ H and p = py G H. We define the autocorrelation 
function of f by 

ACf^p : G End{V) 

« ^ ^{P°daf){x). 

Then for all a £ G, 

MD MD MD 

ACf^, («) = ((p°.f) (a))°((p°/) («))*. (39) 
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Proof Let a eG. 



.- IVIU T > „ 

ACf^p (a) = ^ XG{^)ACf^p{x) 

= E^G(^)E(porf./)(y) 

= E E^GWp(/(^y))o(p(/(y)))* 

x£Gy£G 
(since p{x) is unitary) 

= E E XGi^yy~^)p{fi^y)) ° (p(/(y)))* 

xeGyeG 
xGGyeG 

= E^°-^ (a) ° (xG(y)p(/(y)))* 

yeG 

■ — MD ■ — MD 

= {{pof) (a))o((po/) (a))*. 



(40) 



□ 



The corresponding notion of bentness in this context is given by the following 
theorem. 

Theorem 3 Let f : G ^ H. The map f is perfect nonlinear if and only if\/a € G, 
— ■ MD ■ — MD 

{{pof) {a)r = \G\Idv. (41) 

Proof 

f is perfect nonlinear <^^> Vq G G*, daf is balanced 

^ Vq G G*, Vp = py G ff*, E ° '^"/)(^) = ^End{V) 

xeG 

(according to lemma [8]) 

^ Va G G*, Vp G H\ ACf^pia) = QEnd(V) ^^^^ 
(by definition oi AC f p) 

~ ' MD 

^yaeG, Vp G H*, ACf^p (a) = ACf^piea) 
(according to proposition [3|). 

But ACf,p{eG) = Y,{podeaf){x) = ^ p[eH) = Idy = \G\Idv ■ Then ac- 

xeG x£G xeG 

cording to (fiO|l and (|i2)) . / is perfect nonhnear <4> Vq G G, \fp = py & H* , 

MD MD 

{{pof) (a))o((po/) {a))* = \G\Idv. (43) 

□ 

Another time, by using the trace on both sides of (|4ip . we deduce the following 
corollary. As in the previous case, an interesting question should be to check if this 
result is or not a sufficient condition for bentness in this particular context. 

Corollary 2 Let f : G ^ H . If the map f is perfect nonlinear then Va G G and 
Wp = pv & H* . 

— ^MD „ 

II(P°/) (a) ||Ld(V)=iG|dimc(F). (44) 
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5.3 Case where G and H are both non Abehan 

In this subsection, G and H are both finite non Abelian groups. 

Let p' = p'y^r G H and B = {6^}^™'^^'^^ be an orthonormal basis of W (for the 
scalar product (., ■)h,p' ,w of W as introduced by (|16|) ) in which for all y £ H, p'(y) 
is a unitary operator. For £ {1, ... , diin£{W)}^ , let define 



In other terms, for each y e H, p'ij{y) is simply the coefficient (i, j) of the dimc(W^) x 
dimc(W^) unitary matrix that represents p' {y) in the basis B. 
Let see some obvious results on p[j for G {1, . . . , d\inc{W)}^ . 

1. Let (y 1,2/2) £ H^.We have p{yiy2) = p' (vi) ° p' {y2) ■ Then we have p'y (yii/2) = 

dimc(W) 

Pik{.vi)Pkj{y2)\ 

k=l 

2. Let y £ H. Since p'{y^^) = p'{y)* then we deduce that pij{y^^) = p'ji{y)- 

Note also that the identity map Id\^ is written in any orthonormal basis of W as 
the identity matrix and OEnd{W) is associated, in any basis of W, with the all-zero 
matrix. 

As in the previous subsections, we introduce some kind of autocorrelation func- 
tion for / : G ^ if. 

Proposition 7 Let f : G H, p' = p'y^r € H and G {!,... ,dimc(W)}^. We 

define the autocorrelation function of f 



AC f pi i j : G — >■ C 

a ^ Y,{p[^odo.f){x). (46) 

xeG 



Then for all p = py G G, 



dirn,c{W) 

fe=i 
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Proof Let p = py £ G. 

Ac:f,p'A,j{p) = Yl ^'^f,p',t-ji^)pi^) 
= Yl Y^P^o °dxf){y)p{x) 

xeGyeG 
xeGyeG 

dimc(lV) 

= EE E ftfe(/(^2/))p;-.(/(!/)M^) 

xeGyeG k=l 
dimc:(H^) 

= E J2J2pM^y')^My))pi^yy^') 

k=i xeGyeG (48) 

dimc(lV) 

= E YYp'^k{f{3:y))p'jkifiy))p{^y)°p(y)* 

k=l x£Gy£G 
dimc(W) 

= E J2J2pM^y^)p{^y^o(p',My))piyr) 

k=l x£GyGG 
dimc(W) 

= E ii^f)ip))°J2ip'M-ny))piy)T 

k=l yeG 
dimc(W) 

= E ((pw)(p))°((pw)(p)r- 

fc=i 



Using this autocorrelation function and its Fourier transform we can exhibit the 
appropriate notion of bentness for this context where both groups G and H are 
non Abehan. 

Theorem 4 Let f : G H . The map f is perfect nonlinear if and only ifip = pv G 
G, yp' = p'w&H*, V(z,j) G {l,...,dimc(W^)}", 

dime (IV) f 

E ((.w)(.)) » = { 1,1'^;;^;=/, <«) 



Proof 



k=l 

f is perfect nonhnear <^ Va G G*, da/ is balanced 
<^Va G G*, Vp' = p'w G if*, 

E ^P ° d-f^f^i^) = ^EndiW) 
xGG 

(according to lemma [8| 

^VaGG*, \fp' eH*, \f{i,j) e{l,...,dimc{W)f, 

J2(P^J°daf)ix) = (50) 
xeG _ 

^VaGG*, "ip' eH*, V(i,i) G{l,...,dimc(M/)}2, 
^G/y,,,,(a)^=0 

^ Vpv G G^p' G //*, V(i, j) G {1, . . . , dimc(W^)f , 

^C'/,p',i,i(Py) = ^C'/,p',ij(eG)My 
(by lemma [3]). 
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But j4Cy,p'^i J (eg) = (p'ijodeQ f){x) = /9'y (e/f). Since we know that p'(e/f) = 

Id]Y, then p'{e}{) is written in the orthonormal basis B ofW as the identity matrix 
and then V(i, j) £{!,.. . , dimc(VK)}^, 

From this last resuh, the equality (|48|) and the equivalence (|50p . it follows the 
expected result. □ 

This case where both groups G and H are non Abelian involves some kind of tensor 
(or at least of block-matrix) notion of bentness. This is essentially due to the lack 
of commutativity of both groups. 



6 Summary 

The different notions of bentness, depending on the fact that the finite groups G 
and H are Abelian or not, are summarized below. 

A function f : G ^ H is bent (or equivalently perfect nonlinear) if and only if 

1. If G and H are Abelian ([2,8 ): V(a,/3) e G x H* , 

I(X§^/)(«)|' = |G|. 

2. If G is non Abelian and H is Abelian: V(p,/3) e G x H* (with p : G ^ 'U(V)), 

((xW)(p)) ° iix^mp))* = \G\idv. 

3. If G is Abelian and H is non Abelian: V(q,p') e G x H* (with p' : H ^ \}{W)): 

— MD — MD 

Hp' of) (a))o((p'o/) {a)r = \G\Idw 

4. If G and H are both non Abelian groups: V(p, p',{i,j)) £ GxH* x{l, . . . , dimc(W)}^ 
(with p:G^ U(y) and p : H ^ 1U(W)), 

dimc(H') r I I 



k=l 
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